Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/6D6NbO4mpX3571YePb7wBqCbgBc.roa
File: 6D6NbO4mpX3571YePb7wBqCbgBc.roa (raw, json)
Hash identifier: 360JpGFWi4fwKRE3FPgMGW/rJz0k3wsKNSQFnzGnVZI=
Subject key identifier: E8:3E:8D:6C:EE:26:A5:7D:F9:EF:56:1E:3D:BE:F0:06:A0:9B:80:17
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 019422FC481E93E5B4C2D0B076ECEF8DD8A5
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/6D6NbO4mpX3571YePb7wBqCbgBc.roa
Signing time: Wed 01 Jan 2025 17:49:06 +0000
ROA not before: Wed 01 Jan 2025 17:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42876
IP address blocks: 194.60.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:48:1e:93:e5:b4:c2:d0:b0:76:ec:ef:8d:d8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e83e8d6cee26a57df9ef561e3dbef006a09b8017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:0a:62:d5:cb:60:75:27:71:65:c4:75:5b:
04:5b:0f:22:ab:6b:98:c8:6a:56:06:7a:92:ff:b2:
6f:58:44:7c:10:d0:57:fb:3e:ed:86:98:d8:fc:65:
a0:4c:38:4a:0b:3d:bd:e4:db:8a:18:85:ce:ee:7a:
ed:07:87:d0:1f:88:7d:a0:c8:92:8b:fc:d9:45:8b:
41:a0:c0:63:3b:b2:e6:19:99:94:04:f2:81:b9:35:
42:75:ac:aa:5c:6f:32:02:8d:01:8d:92:e6:1a:cd:
e5:c4:06:96:24:06:2e:15:1b:d0:17:5c:73:3a:87:
48:a7:7b:02:a3:3e:94:7c:26:bf:05:70:a2:dd:6e:
78:8a:47:f2:6f:e4:1c:a5:10:11:7d:a6:65:cf:c3:
b5:e8:6c:6c:4b:3b:5b:1c:a4:19:02:93:75:5e:cd:
d8:f8:8d:d4:2a:02:83:a5:5e:14:d1:ff:b6:18:aa:
62:32:a1:4c:30:e3:b8:65:70:0e:5a:43:79:6f:c5:
47:19:88:ca:b0:2d:27:ce:70:99:d2:2f:82:94:34:
19:a6:3a:84:46:f6:01:90:bb:73:9c:38:52:a9:31:
cd:0a:3a:13:1d:22:3a:d5:c7:c8:9f:77:2f:aa:82:
60:05:2b:69:60:d5:9d:37:ea:a2:e1:3b:bf:2e:e4:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3E:8D:6C:EE:26:A5:7D:F9:EF:56:1E:3D:BE:F0:06:A0:9B:80:17
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/6D6NbO4mpX3571YePb7wBqCbgBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.243.0/24
Signature Algorithm: sha256WithRSAEncryption
67:28:bd:ec:7e:45:c1:01:45:c3:2b:b1:8e:8e:50:a0:65:0f:
b8:0e:eb:8d:dc:b1:eb:d4:7d:70:c4:11:74:2f:16:ef:1d:39:
23:57:91:05:ee:30:90:91:06:df:3d:1a:c3:eb:51:09:4e:4c:
04:d4:cc:0a:b5:a2:e7:9c:2f:83:76:93:cf:b3:f2:f6:89:e9:
bc:e4:8b:bb:69:c8:c9:97:e4:c6:57:e3:42:e3:ce:4f:bf:19:
1a:b8:de:1c:af:22:be:b4:37:2e:fd:a6:d2:e1:8e:da:9d:28:
b4:81:f3:1b:68:bd:f7:9f:3f:36:1b:48:88:e1:90:f2:3b:7f:
15:dc:d3:8f:4f:99:a1:fb:7f:62:af:64:46:5f:59:c0:11:72:
53:56:98:ce:75:53:ad:0b:36:8b:84:d3:53:e8:b2:5d:35:f6:
9a:13:d8:9b:36:af:f4:65:5d:e0:b4:0b:d5:02:c2:20:09:16:
61:db:29:6a:1d:e9:ed:3d:c6:d9:aa:92:50:7c:d6:0f:ce:cc:
8d:df:85:93:06:06:7a:ac:b4:3e:8c:12:c0:c9:b6:5e:f1:af:
02:99:e9:25:12:f5:cd:0f:54:d2:0d:3a:e3:98:13:fe:81:08:
49:7a:69:22:42:4a:1a:8a:d2:3b:12:cd:af:42:c1:03:b6:3c:
4c:c8:32:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/Egek+W0wtCwduzvjdilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNzI3NmM0ZDhjZmFmYzA0YzI2Zjg1ZmIzNGZkOWVjZTQ3
Njk2OTUwHhcNMjUwMTAxMTc0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODNlOGQ2Y2VlMjZhNTdkZjllZjU2MWUzZGJlZjAwNmEwOWI4MDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9kKYtXLYHUncWXEdVsEWw8iq2uY
yGpWBnqS/7JvWER8ENBX+z7thpjY/GWgTDhKCz295NuKGIXO7nrtB4fQH4h9oMiS
i/zZRYtBoMBjO7LmGZmUBPKBuTVCdayqXG8yAo0BjZLmGs3lxAaWJAYuFRvQF1xz
OodIp3sCoz6UfCa/BXCi3W54ikfyb+QcpRARfaZlz8O16GxsSztbHKQZApN1Xs3Y
+I3UKgKDpV4U0f+2GKpiMqFMMOO4ZXAOWkN5b8VHGYjKsC0nznCZ0i+ClDQZpjqE
RvYBkLtznDhSqTHNCjoTHSI61cfIn3cvqoJgBStpYNWdN+qi4Tu/LuQK0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOg+jWzuJqV9+e9WHj2+8Aagm4AXMB8GA1UdIwQY
MBaAFP9ydsTYz6/ATCb4X7NP2ezkdpaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzNKMnhOalByOEJNSnZoZnMwX1o3T1IybHBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85ZGY4MTEtMDdkYy00ZmRmLTkxMTgt
NzdmZDRkMWU1YjI2LzEvNkQ2TmJPNG1wWDM1NzFZZVBiN3dCcUNiZ0JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85ZGY4MTEtMDdkYy00ZmRmLTkxMTgtNzdmZDRkMWU1YjI2
LzEvXzNKMnhOalByOEJNSnZoZnMwX1o3T1IybHBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjzzMA0G
CSqGSIb3DQEBCwUAA4IBAQBnKL3sfkXBAUXDK7GOjlCgZQ+4DuuN3LHr1H1wxBF0
LxbvHTkjV5EF7jCQkQbfPRrD61EJTkwE1MwKtaLnnC+DdpPPs/L2iem85Iu7acjJ
l+TGV+NC485PvxkauN4cryK+tDcu/abS4Y7anSi0gfMbaL33nz82G0iI4ZDyO38V
3NOPT5mh+39ir2RGX1nAEXJTVpjOdVOtCzaLhNNT6LJdNfaaE9ibNq/0ZV3gtAvV
AsIgCRZh2ylqHentPcbZqpJQfNYPzsyN34WTBgZ6rLQ+jBLAybZe8a8CmeklEvXN
D1TSDTrjmBP+gQhJemkiQkoaitI7Es2vQsEDtjxMyDLu
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:44:59 2025 by rpki-client